161.156.6.106
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- International Business Machines Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS36351
- Domain Name
- ibm.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 juutis |
Oct 8 03:09:53 butler postfix/smtpd[1291267]: warning: 6a.06.9ca1.ip4.static.sl-reverse.com[161.156.6.106]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
|
Brute-Force | |
| 🇮🇹 Inartis |
Oct 8 02:43:31 mail1 postfix/smtpd[1587008]: warning: 6a.06.9ca1.ip4.static.sl-reverse.com[161.156.6.106]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
|
Port Scan Brute-Force | |
| 🇨🇦 Mediashaker |
(smtpauth) Failed SMTP AUTH login from 161.156.6.106 (US/United States/6a.06.9ca1.ip4.static.sl-reverse.com)
|
Brute-Force | |
| Anonymous |
Authentication failure
|
Brute-Force | |
| 🇮🇩 xveil |
2026-10-08T03:16:49.352109 mail-honeypot postfix/submission/smtpd[14402]: warning: 6a.06.9ca1.ip4.static.sl-reverse.com[161.156.6.106]: SASL PLAIN authentication failed: authentication failure
...
|
Brute-Force | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
|
Hacking | |
| 🇨🇿 unhfree.net |
|
Brute-Force Exploited Host | |
| 🇩🇪 edgeshield |
Automated web request flooding / DDoS (EdgeShield WAF).
|
DDoS Attack | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 2026-10-07 15:18 UTC
|
Bad Web Bot | |
| 🇭🇰 ncsr-sec |
Attacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned. Evidence in server logs.
|
Brute-Force Bad Web Bot | |
| Anonymous |
Blocked by UFW (TCP on 18000)
Source port: 50380
TTL: 46
Packet length: 60
TOS: 0x14
This report (for 161.156.6.106) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇮🇪 JoJo7878 |
Password spray
|
Brute-Force | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇨🇦 dpinse |
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: admin:admin
• Number of login attempts: 1
• Client: SSH-2.0-Go
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown